Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abfffe12-ebec-4645-bb49-fcce9eb504dc.roa
File:                     abfffe12-ebec-4645-bb49-fcce9eb504dc.roa (raw, json)
Hash identifier:          e0E/xS93K9lWdIekSTyu624I799GnK15vxWWeOTq0r0=
Subject key identifier:   41:F5:83:31:21:96:D7:F7:BF:F9:C0:5F:11:5B:5A:17:0F:18:37:61
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       73ED83795C33363C7288C815456AE9AE5E170DFE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abfffe12-ebec-4645-bb49-fcce9eb504dc.roa
Signing time:             Fri 05 Apr 2024 00:00:00 +0000
ROA not before:           Fri 05 Apr 2024 00:00:00 +0000
ROA not after:            Fri 10 May 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        18.59.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ed:83:79:5c:33:36:3c:72:88:c8:15:45:6a:e9:ae:5e:17:0d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  5 00:00:00 2024 GMT
            Not After : May 10 23:59:59 2024 GMT
        Subject: serialNumber=eadcecc569427895c2879c4f382389a434eeebbc14ee8b91e92c2b81857e87fb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:c7:e6:ef:a0:cb:a9:c7:7b:67:5a:65:09:
                    4a:1d:86:4f:42:3e:07:78:e3:06:05:c4:41:47:4b:
                    a6:ea:9f:6c:a3:df:a4:24:80:f0:a8:f8:e0:8a:3f:
                    3a:6d:36:69:82:b0:91:77:8e:aa:47:a2:e7:2d:60:
                    a6:d4:ed:c1:fa:26:74:00:97:3a:76:c2:8b:11:0e:
                    8c:ac:b9:3b:8d:c8:ca:18:fd:94:66:61:0b:e6:8a:
                    01:1a:4b:95:fb:37:ec:9f:9d:f7:2f:72:a9:2a:c4:
                    98:e3:83:86:0b:1e:e2:1e:f5:c1:35:9a:a3:2e:67:
                    7a:3a:01:aa:35:4e:5b:3d:e6:70:40:ec:fc:f6:a6:
                    3d:1e:7a:11:f5:49:66:77:90:3a:8c:b7:59:87:da:
                    15:be:90:21:a2:c9:ed:e7:7f:b1:30:5e:fd:2c:0e:
                    b5:92:6a:9a:55:31:b8:5d:90:ba:8c:da:f0:85:71:
                    90:2b:19:28:a1:19:c0:e5:4f:c7:0a:fa:77:b0:59:
                    27:1d:8a:0b:bf:fd:34:02:ad:03:96:c4:58:a7:92:
                    ba:9e:6d:39:c6:0d:39:7e:43:64:6e:07:1e:4e:a8:
                    2a:78:71:71:7f:82:94:36:03:84:fd:c0:a5:c7:7f:
                    3b:20:18:8f:be:4b:40:89:b6:d9:25:5a:ef:df:3e:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F5:83:31:21:96:D7:F7:BF:F9:C0:5F:11:5B:5A:17:0F:18:37:61
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abfffe12-ebec-4645-bb49-fcce9eb504dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.59.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:ee:23:33:69:0b:bd:4b:a1:db:7d:73:84:cb:ef:e6:1c:97:
         d9:32:6a:61:b8:35:53:a4:04:7e:62:0a:d2:ad:d8:6a:ca:d6:
         f0:85:41:bf:3e:bd:40:86:ec:b7:76:31:73:2e:29:2a:1f:97:
         25:6a:2f:08:c4:f0:52:ba:1a:b0:25:e2:d4:cf:3d:e3:53:b0:
         fc:a5:55:9a:3e:be:c6:ba:e4:71:57:dd:3e:64:54:6e:64:47:
         52:cf:a5:e1:20:27:77:4f:d3:c3:a9:62:21:5a:cd:d9:78:fc:
         85:ec:18:c4:7b:17:ed:cf:8c:2c:ec:37:43:76:25:85:98:9e:
         e1:4e:3f:b2:ad:87:18:e6:3e:a5:13:d5:da:7d:13:07:6d:33:
         a3:1f:7d:c7:bb:97:6f:f4:48:bc:38:84:9e:39:54:98:12:38:
         e1:5a:7a:0a:55:21:e8:03:19:1c:30:36:32:09:c8:2e:2c:d5:
         0b:0e:77:83:f2:6f:2b:3d:a9:1d:75:67:8f:e6:95:7d:d6:a8:
         09:18:06:39:08:4a:4a:61:69:cf:ee:1d:53:ca:f5:f3:63:df:
         25:d6:9c:e9:c9:18:6a:99:9b:26:d8:61:d0:57:71:6e:a9:60:
         5e:e1:f9:ed:39:32:df:ba:d3:2b:12:a3:92:8b:2d:f5:f9:78:
         ad:9a:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:05 2024 by rpki-client on console-ams.rpki-client.org